Malicious
ZIP Archive
MD5: f9bc364d90ce3068857255f9d728ba6e
Size: 321.49 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
321.49 KB · 321,486 B
First seen
2026-07-20 19:15 · 3 months ago
Last seen
2026-07-20 19:15 · 3 months ago
Last analysis
2026-07-21 03:18 · 3 months ago
Hashes
MD5
f9bc364d90ce3068857255f9d728ba6e
Sha1
2556c885d1f59017a26d4ab8c8ad01d474e6e507
Sha256
194742d59dacc09a04a398be2f1de1403b65e2ab7028a5125bd1b3d4f55f31c0
Sha384
c55fb643eb8111ea508d79c7e13e97108b32c1580d51327d9c7ba385d0ff1d54c9f7cd8067105984725f4458ef5e4a6e
Sha512
43f2c5a6224d3865fc67ecf7bb84791b9aa01ffaab33a36f54c423cc4120eb9c8bf13b4e68c2d9f8667069daa6d46104c3475cede2a687a5a71b851725995409
SSDeep
6144:l9cPfRPXe/NqgoOyYeXFl3lXK8RhotTVpIq9gA3HA:cPU/Nqgose1dABIU73HA
TLSH
F86423783DEE046E4065DE6DE0A67231DEE83724B564D7AB69E34A0C078CF364F0951B
3 malicious · 3 files
ZIPf9bc364d90ce3068857255f9d728ba6eT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKgallery_2026.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.003~T1202~T1204.002
Shape
arc:zip>lnk
malicious
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential